Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/Mu06mwbjgUybyruTnA_PYaohNMo.roa
File: Mu06mwbjgUybyruTnA_PYaohNMo.roa (raw, json)
Hash identifier: VnYwKvGUQ6HGVOyvnw1gUi60zkSDhIQ+/lcGAw4wT+c=
Subject key identifier: 32:ED:3A:9B:06:E3:81:4C:9B:CA:BB:93:9C:0F:CF:61:AA:21:34:CA
Certificate issuer: /CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
Certificate serial: 018CC56EFE65262D50C419AB36B5E3D7F6D1
Authority key identifier: 85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/Mu06mwbjgUybyruTnA_PYaohNMo.roa
Signing time: Mon 01 Jan 2024 14:30:34 +0000
ROA not before: Mon 01 Jan 2024 14:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60405
IP address blocks: 185.172.34.0/24 maxlen: 24
185.172.32.0/24 maxlen: 24
185.172.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 17:58:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:fe:65:26:2d:50:c4:19:ab:36:b5:e3:d7:f6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
Validity
Not Before: Jan 1 14:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32ed3a9b06e3814c9bcabb939c0fcf61aa2134ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0a:c8:58:23:5c:52:6e:27:cd:64:75:3f:80:
e2:ac:63:f2:7c:f5:c2:16:cc:0d:3b:2d:0d:f2:69:
c1:3e:59:95:d7:1d:2b:70:4a:da:1d:89:03:da:4f:
1d:2f:d8:82:f8:7c:33:1b:72:03:bf:82:ad:e9:ad:
93:ef:97:2e:7b:4e:a2:86:f7:7b:e4:85:d1:ab:f2:
21:e5:1c:f8:0b:13:98:12:46:fb:5a:c0:7b:c9:f2:
32:20:de:d0:c0:61:0b:da:60:00:de:16:6c:40:af:
d7:fc:41:54:4b:89:6d:03:46:6d:51:3b:44:3c:55:
50:47:e0:62:66:e2:fe:bf:ce:81:bf:9c:de:0d:7a:
3f:33:1a:8f:27:a4:c0:42:a9:e1:7c:6f:a4:a0:d0:
3e:6e:73:d9:a1:15:43:14:ce:b8:68:15:69:d3:4e:
b7:f2:bb:b3:f3:01:c4:3e:44:5e:2f:c2:c8:83:a0:
ec:7e:b8:53:0c:4d:e4:a0:76:d6:d5:0e:5c:7a:2d:
6a:a1:61:69:f9:7c:f6:8f:3d:c6:d3:b4:e3:5d:5d:
06:88:0b:2f:bc:ac:e5:c9:f5:b1:e9:93:79:06:76:
c8:b4:03:36:88:37:14:dc:cf:85:0c:fa:bc:85:be:
f9:4f:f2:88:da:b7:fb:23:28:ff:a2:0e:33:cb:20:
33:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:ED:3A:9B:06:E3:81:4C:9B:CA:BB:93:9C:0F:CF:61:AA:21:34:CA
X509v3 Authority Key Identifier:
keyid:85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/Mu06mwbjgUybyruTnA_PYaohNMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.32.0/24
185.172.34.0/23
Signature Algorithm: sha256WithRSAEncryption
04:34:fc:de:c6:43:2b:1e:7e:d5:88:55:00:0a:9d:f9:7d:45:
7e:12:a0:0e:76:c2:cf:44:c7:65:02:c8:e3:48:f8:64:ff:ea:
40:ce:2a:48:f9:b0:8f:c1:20:07:c0:0b:47:7b:bb:40:68:f7:
09:e2:7d:97:fa:43:32:41:b8:53:b2:29:9d:a4:5b:43:6d:76:
a2:43:f9:12:d1:0f:a5:84:e9:94:e4:15:e2:11:30:dd:6c:39:
a1:ff:fd:c0:cc:50:5a:2d:ec:f0:b0:41:b7:9f:9b:ac:9e:f2:
f7:c4:71:b1:4a:4a:94:61:d1:50:ba:9e:54:62:05:3a:80:2c:
7c:0b:f6:77:c3:d9:ca:00:89:c7:5f:88:55:1d:6e:dc:e1:c4:
7a:34:91:60:1c:d2:9a:0d:7a:56:73:50:2a:33:48:ab:1c:12:
a6:1a:69:64:54:7b:21:9f:dc:49:44:92:31:be:07:cb:85:80:
1a:fe:e0:82:45:a8:6c:ee:5d:aa:8e:37:b9:8a:ea:0f:6f:b1:
be:dc:b3:c7:c7:cb:df:ec:41:33:12:27:3f:22:ba:e4:aa:be:
d2:02:fe:b1:85:82:44:b6:cc:43:85:a8:82:b3:86:4f:7a:52:
66:8c:a3:c4:49:32:3b:fa:89:5c:c8:2e:43:3d:1e:9c:32:e3:
64:65:24:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:54 2025 by rpki-client